$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa File: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (raw, json) Hash identifier: s8KDuc2GwuTam8uLkRKj65TwjJKxip9pxFU2PqilzJk= Subject key identifier: E1:2F:11:8C:C4:43:3A:E1:4C:B9:1E:5B:31:A1:5F:5C:0B:E2:09:C2 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 06EB Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa Signing time: Wed 08 Oct 2025 22:24:18 +0000 ROA not before: Wed 08 Oct 2025 22:24:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132815 IP address blocks: 131.203.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 8 22:24:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6e492-f115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:16:96:1f:03:8a:3b:ed:44:b2:3c:25:38: f5:58:81:cb:b9:39:08:e4:9a:1c:5a:94:2c:f9:75: f9:0b:69:f7:8e:eb:27:ec:b0:7f:c6:88:42:77:00: 8d:21:d0:3d:f8:21:16:af:94:12:5a:29:c0:8d:e8: 92:c3:cf:42:5b:cd:c9:eb:86:a1:d7:f2:b7:91:c0: ac:15:4a:2e:d0:4a:d7:6f:28:4e:5c:c6:9f:04:51: f1:c4:24:7d:69:2d:87:dd:60:f8:1f:55:6a:fe:61: 66:12:5c:d8:c7:0e:03:47:9c:99:e0:9b:c4:f2:62: 45:53:57:9e:d3:1d:aa:69:e0:04:92:b9:5a:aa:6a: 29:07:7c:9e:80:18:6d:df:a1:01:13:d7:88:0a:21: d7:3e:43:09:12:d9:d6:78:41:c6:54:80:d6:14:b3: 68:b5:04:d1:4a:be:ca:cd:86:02:cf:ff:f5:93:4b: 9a:d0:75:5b:29:2d:19:6f:cf:0a:a1:e3:d1:fb:59: 80:aa:16:0e:16:a8:4f:70:b6:e1:d5:b1:d4:38:7d: be:d4:d9:05:75:88:4c:6c:24:fe:78:82:8a:33:e5: 82:d1:01:81:47:52:bf:9f:c5:4e:7f:6f:8e:c7:28: d5:51:2e:05:b5:43:93:39:24:30:99:de:59:df:a3: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2F:11:8C:C4:43:3A:E1:4C:B9:1E:5B:31:A1:5F:5C:0B:E2:09:C2 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.203.185.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:b3:7f:c6:c3:35:7d:62:c2:3d:80:ba:cf:3a:c4:fe:ea:a1: 66:07:28:a3:f4:fd:2c:1c:7e:ec:33:c1:78:76:28:35:c5:cd: ac:00:51:7b:3c:6a:1e:13:0d:63:19:a3:8a:e9:21:37:87:80: 47:ef:e4:4f:6b:b8:e9:c8:9c:09:56:9e:6c:d5:c1:5f:5d:b6: 38:2c:82:06:3f:03:8e:a7:3b:51:64:fb:85:61:50:b3:d6:e2: 96:f3:b6:49:48:1a:f8:5e:db:a5:ce:b2:91:b3:d3:89:02:c2: ed:2d:d4:f8:bb:b6:aa:7e:e9:e4:4c:ec:f9:9f:14:75:42:f2: 7e:4b:dc:52:8a:64:c7:6b:cb:bf:16:05:86:eb:68:b0:b5:43: e4:0b:0e:a2:b0:9e:f4:f8:2a:1e:ba:78:25:d8:c1:df:90:11: f5:2b:f3:21:77:6a:c2:2e:72:c7:e2:c1:2c:cd:c1:76:88:8a: ea:20:d8:c3:ad:90:5a:96:cf:95:31:d2:f2:5f:38:f6:d4:1c: 90:36:f6:83:9b:54:20:36:fc:11:09:c8:4c:8b:ed:77:2f:1d: 81:79:75:dd:4e:e6:a1:65:0f:f4:ae:4f:c7:84:53:ff:5b:da: 81:a9:93:0d:60:9b:46:ff:2f:84:9e:f7:c5:63:19:9b:24:02: d4:b9:e8:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUxMDA4MjIyNDE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZTQ5Mi1mMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnsWlh8DijvtRLI8JTj1WIHLuTkI5JocWpQs+XX5C2n3jusn7LB/xohCdwCN IdA9+CEWr5QSWinAjeiSw89CW83J64ah1/K3kcCsFUou0ErXbyhOXMafBFHxxCR9 aS2H3WD4H1Vq/mFmElzYxw4DR5yZ4JvE8mJFU1ee0x2qaeAEkrlaqmopB3yegBht 36EBE9eICiHXPkMJEtnWeEHGVIDWFLNotQTRSr7KzYYCz//1k0ua0HVbKS0Zb88K oePR+1mAqhYOFqhPcLbh1bHUOH2+1NkFdYhMbCT+eIKKM+WC0QGBR1K/n8VOf2+O xyjVUS4FtUOTOSQwmd5Z36PKWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOEvEYzE QzrhTLkeWzGhX1wL4gnCMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvN0M3QUU5QjRB NjlEMTFFRDk3MEEyRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACDy7kwDQYJKoZIhvcNAQELBQADggEBAI6zf8bDNX1iwj2A us86xP7qoWYHKKP0/SwcfuwzwXh2KDXFzawAUXs8ah4TDWMZo4rpITeHgEfv5E9r uOnInAlWnmzVwV9dtjgsggY/A46nO1Fk+4VhULPW4pbztklIGvhe26XOspGz04kC wu0t1Pi7tqp+6eRM7PmfFHVC8n5L3FKKZMdry78WBYbraLC1Q+QLDqKwnvT4Kh66 eCXYwd+QEfUr8yF3asIucsfiwSzNwXaIiuog2MOtkFqWz5Ux0vJfOPbUHJA29oOb VCA2/BEJyEyL7XcvHYF5dd1O5qFlD/SuT8eEU/9b2oGpkw1gm0b/L4Se98VjGZsk AtS56CE= -----END CERTIFICATE-----Generated at Mon Oct 20 22:43:13 2025 by rpki-client